Hello all!
I'm doing a comparative study amongst IDS's that works with Network Behavior Analysis (NBA) also known as Traffic Anomaly Based and I would like to know if any of you guys suggest some tools for my work, or a list, preferentially.
The desirable qualities are:
- not commercial (at least with an evaluation period)
- can work in off line mode with trace repositories (not necessarily)
If anybody wants to change some information plz contact me, I can also show what I've got until now...
Thanks a lot!
Gustavo